Maintenance
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f8a89b236655b72cb393c7b45b2a768c_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f8a89b236655b72cb393c7b45b2a768c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f8a89b236655b72cb393c7b45b2a768c_JaffaCakes118
Size
84KB
MD5
f8a89b236655b72cb393c7b45b2a768c
SHA1
d93315764e62327bc46ac3b4a4fe3614c9224d9d
SHA256
518765e267029df6e55a682d2102eec92f90e65da4e80577d739820f6bcb77b9
SHA512
2f3f169c66aa8f4c411a5b7d76a2e22ebfca62221ca3ca1b0728e553c5e1cc2d9c17b6f5bce8fdbb64243c9c7e0ecfa91a8b892a6fff6df5309c74426a8c74a5
SSDEEP
1536:hsQBpTKNeAt/AoE3T7vLX2iQ20KbjvJeA6ahbxA:hsQBpmNeWAXD7vqiQ20KbNefahbxA
Checks for missing Authenticode signature.
resource |
---|
f8a89b236655b72cb393c7b45b2a768c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
AdjustTokenPrivileges
StartServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
wvsprintfA
ShowWindow
SendMessageA
MessageBoxA
LoadStringA
GetWindowThreadProcessId
GetSystemMetrics
GetDlgItem
FindWindowExA
FindWindowA
CharNextA
CharLowerBuffA
CharUpperBuffA
CharToOemA
GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrlenW
WriteProcessMemory
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualAllocEx
Sleep
SetFileAttributesA
SetErrorMode
ReadFile
OpenProcess
OpenMutexA
LoadLibraryA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetThreadLocale
GetTempPathA
GetSystemDirectoryA
GetStdHandle
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentProcess
GetComputerNameA
GetCPInfo
FreeLibrary
FreeConsole
FormatMessageA
EnumCalendarInfoA
DeleteFileA
CreateThread
CreateRemoteThread
CreateMutexA
CreateFileA
CreateDirectoryA
CompareStringA
CloseHandle
Netbios
WSACleanup
WSAStartup
gethostname
gethostbyname
Maintenance
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ